Add Web API authentication based on bearer tokens

Once an user is authenticated with OpenID Connect, he can retrieve his personal access and refresh tokens.

These tokens can be used to authenticate requests to the Web API by sending them in HTTP headers.

We must add support to that authentication scheme using Django REST framework.

---

Migrated from T2249 (view on Phabricator)